UPX bele.h get_ne64 heap-based overflow

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0

An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111)

pgjdbc SQL Injection via line comment generation

Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file

Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer

Mock: privilege escalation for users that can access mock configuration

heap buffer overflow in libaom

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer

Moodle: rce due to lfi risk in some misconfigured shared hosting environments

Samba: smbd allows client access to unix domain sockets on the file system as root

Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake

A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr,…

Unauthenticated SQL Injection in graph_view.php in Cacti

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a…

Out-Of-Bounds Write in FreeRDP

Out-Of-Bounds Write in FreeRDP

IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

Invalid offset validation leading to Out Of Bound Write in FreeRDP

Heap-based Buffer Overflow in radareorg/radare2

Buffer overflow and overread in phar_dir_read()

Certifi's removal of e-Tugra root certificate

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

Code injection via go command with cgo in cmd/go

A vulnerability was found in ImageMagick

In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files

An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3

The Mustache pix helper contained a potential Mustache injection risk if combined with user input (note: This did not appear to be implemented/exploitable anywhere in the core…

Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device

After tar_close(), libtar.c releases the memory pointed to by pointer t

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and…

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted…

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a…

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of…

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics

Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate…